CVEvulnerability

CVE-2007-4703

10.0 HIGH Published 2007-11-15 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-11-15
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The Application Firewall in Apple Mac OS X 10.5 does not prevent a root process from accepting incoming connections, even when "Block incoming connections" has been set for its associated executable, which might allow remote attackers or local root processes to bypass intended access restrictions.

Affected configurations

• apple mac os x 10.5 • apple mac os x server 10.5

References

http://docs.info.apple.com/article.html?artnum=307004 Patch
http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html Patch
http://secunia.com/advisories/27695 Vendor Advisory
http://securitytracker.com/id?1018958 securitytracker.com
http://www.securityfocus.com/bid/26460 www.securityfocus.com
http://www.vupen.com/english/advisories/2007/3897 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38479 exchange.xforce.ibmcloud.com
http://docs.info.apple.com/article.html?artnum=307004 Patch
http://lists.apple.com/archives/security-announce/2007/Nov/msg00004.html Patch
http://secunia.com/advisories/27695 Vendor Advisory
http://securitytracker.com/id?1018958 securitytracker.com
http://www.securityfocus.com/bid/26460 www.securityfocus.com
http://www.vupen.com/english/advisories/2007/3897 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/38479 exchange.xforce.ibmcloud.com